Group demos new architecture for strong authentication
Gemalto, Fingerprint Cards, Precise Biometrics and STMicroelectronics introduced security architecture for biometric fingerprint and strong authentication.
The system offers a proof-of-concept that replaces conventional username/password authentication for applications such as payment, eticketing, digital access and two-factor authentication with fingerprint recognition.The group demonstrated this solution on a smartwatch that embeds a fingerprint sensor from Fingerprint Cards, fingerprint software from Precise Biometrics and Secure NFC solution and low power microcontrollers from STMicroelectronics.
Gemalto provides the UpTeq eSE on which the user’s credentials are stored, and the Match-On-Card application that validates the fingerprint placed on the sensor corresponds to the biometric data of the user. Gemalto also supplies secure applications and the Allynis Trusted Services Hub responsible for managing the solution.
For end users, the new architecture spells an end to numerous username and password combinations to access essential applications such as payment, secure email and government ID programs. This solution will offer new opportunities to the consumer electronics market to implement secure authentication solutions based on FIDO Alliance’s specification, and give consumer electronics manufacturers the option to differentiate from competition.
Tablet features palm vein biometrics
Fujitsu launched its STYLISTIC Q736 featuring different types of security technologies including Fujitsu’s PalmSecure palm vein biometric technology.
The new 13.3-inch tablet – which also converts instantly into a classic clamshell notebook through the connection of a dockable keyboard – enables security authentication with biometrics or SmartCard technology, also including support for contactless SmartCard via NFC technology. Furthermore, the STYLISTIC Q736 features encrypted drives and Intel’s TPM, which provides secured storage for security keys and passwords, further protecting against unauthorized access to sensitive data.
The new device is suited to vertical industries where it is equally important to ensure that data already on the device is secured – for example, patient records in healthcare, or bank account details in financial services – as well as ensuring only secured access to the tablet itself.
BlackRidge unveils real-time identity threat system
BlackRidge Technology, a provider of identity-based network and cyber security systems, announced the BlackRidge App for Splunk to provide real-time identity attribution for detecting insider and third party security threats. BlackRidge adds a new layer of real-time security protection that protects servers before a network connection is established, using its First Packet Authentication technology.
The BlackRidge App for Splunk provides identity attribution for such threats, thereby helping CISOs to:identify compromised or rogue insiders and third party vendors; gain key insights to help with remediation; meet requirements for security controls, audits, and regulatory compliance
Peru issuing ePassports
The Imprimerie Nationale Group and Gemalto have been awarded a multi-year contract to deliver a complete end-to-end ePassport solution for Peru. ICAO selected the consortium after an international tender last August by the Superintendencia Nacional de Migraciones de Peru.
The Imprimerie Nationale leads the consortium and performs the design and manufacturing of the electronic passports. The new ePassport offers high security including exclusive watermark, micro lettering, inlay, UV and rainbow printing, and secure inks. Gemalto ensures the implementation of the complete credentials system, with the creation of 20 enrollment sites and personalization throughout the Peruvian territory, based on its Sealys eTravel secure embedded software for identity authentication, and its Coesys Instant Issuance for on the spot document personalization and delivery. Gemalto will secure data enrollment including automated fingerprint identification system (AFIS), public key infrastructure (PKI) services, ePassport personalization, a contingency data center plus quality and access control across the entire ePassport ecosystem.
Smartrac achieves EAL6 Certification at eID site
Smartrac has obtained Common Criteria EAL6 certification for its Thailand production site, enabling the handling of EAL6 certified products supplied by chip and chip operating system providers.
Compared to EAL5, EAL6 certification requires an enhanced secure IT infrastructure, including firewall, virtual private network and intrusion detection system/intrusion protection system, as well as excellent perimeter security.